Critical 9.8Published Jun 18, 2025

CVE-2025-38075scsi: target: iscsi: Fix timeout on deleted connection

Updated under an hour ago (Oct 27, 2026, 11:10 PM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix timeout on deleted connection NOPIN response timer may expire on a deleted connection and crash with such logs: Did not receive response to NOPIN on CID: 0, failing connection for I_T Nexus (null),i,0x00023d000125,iqn.2017-01.com.iscsi.target,t,0x3d BUG: Kernel NULL pointer dereference on read at 0x00000000 NIP strlcpy+0x8/0xb0 LR iscsit_fill_cxn_timeout_err_stats+0x5c/0xc0 [iscsi_target_mod] Call Trace: iscsit_handle_nopin_response_timeout+0xfc/0x120 [iscsi_target_mod] call_timer_fn+0x58/0x1f0 run_timer_softirq+0x740/0x860 __do_softirq+0x16c/0x420 irq_exit+0x188/0x1c0 timer_interrupt+0x184/0x410 That is because nopin response timer may be re-started on nopin timer expiration. Stop nopin timer before stopping the nopin response timer to be sure that no one of them will be re-started.

CVSS: 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 15, 2026
First seen by InfoSec Signals: Oct 15, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from e48354ce078c079996f89d715dfa44814b4eba01 before 571ce6b6f5cbaf7d24af03cad592fc0e2a54de35; from e48354ce078c079996f89d715dfa44814b4eba01 before 2c5081439c7ab8da08427befe427f0d732ebc9f9; from e48354ce078c079996f89d715dfa44814b4eba01 before 019ca2804f3fb49a7f8e56ea6aeaa1ff32724c27; from e48354ce078c079996f89d715dfa44814b4eba01 before 6815846e0c3a62116a7da9740e3a7c10edc5c7e9; from e48354ce078c079996f89d715dfa44814b4eba01 before fe8421e853ef289e1324fcda004751c89dd9c18a; from e48354ce078c079996f89d715dfa44814b4eba01 before 87389bff743c55b6b85282de91109391f43e0814; from e48354ce078c079996f89d715dfa44814b4eba01 before 3e6429e3707943078240a2c0c0b3ee99ea9b0d9c; from e48354ce078c079996f89d715dfa44814b4eba01 before 7f533cc5ee4c4436cee51dc58e81dfd9c3384418	CNA record
linux linux_kernel linux:linux_kernel	from 3.1 before 5.4.294; from 5.5 before 5.10.238; from 5.11 before 5.15.185; from 5.16 before 6.1.141; from 6.2 before 6.6.93; from 6.7 before 6.12.31; from 6.13 before 6.14.9; 6.15; and 2 more ranges	NVD
debian debian_linux debian:debian_linux	11.0	NVD

References

References

https://git.kernel.org/stable/c/571ce6b6f5cbaf7d24af03cad592fc0e2a54de35	patch
https://git.kernel.org/stable/c/2c5081439c7ab8da08427befe427f0d732ebc9f9	patch
https://git.kernel.org/stable/c/019ca2804f3fb49a7f8e56ea6aeaa1ff32724c27	patch
https://git.kernel.org/stable/c/6815846e0c3a62116a7da9740e3a7c10edc5c7e9	patch
https://git.kernel.org/stable/c/fe8421e853ef289e1324fcda004751c89dd9c18a	patch
https://git.kernel.org/stable/c/87389bff743c55b6b85282de91109391f43e0814	patch
https://git.kernel.org/stable/c/3e6429e3707943078240a2c0c0b3ee99ea9b0d9c	patch
https://git.kernel.org/stable/c/7f533cc5ee4c4436cee51dc58e81dfd9c3384418	patch
https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html	third-party-advisory
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html	third-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.